Re: suexec question

Hi Barti.

Apache tells suexec under which uid/gid run application through
User/Group directives (different in Apache2).

If I remember right you can set owner of this script even to root.

It cannot be writable by others and it cannot has suid/sgid bits set.

This way script will be executed with proper UID/GID and users cannot
modify it.

Regards

Gasior

barti wrote:

Hi List
I've enabled suexec for one of my test domain.
Suexec limitations dosent allow me to run phpcgi from outside of virtualhost
docroot.
I am thinking about security problem if I put bash script inside user
docroot.
#!/bin/sh
export PHPRC
PHP_FCGI_CHILDREN=1
export PHP_FCGI_CHILDREN
exec /usr/local/bin/php
If script should have user's rights means that user can change it.
Is there any more elegant way

barti

----------

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/